$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa File: ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json) Hash identifier: EbclkYK9wkPrf/2NxRZbduby4+jdB6YAAvSFoSVNKs8= Subject key identifier: AF:EB:BC:14:E6:ED:1D:B5:1D:77:31:9D:91:ED:5E:16:03:56:DB:56 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584A42758A24034767C002348580 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 63150 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8a:24:03:47:67:c0:02:34:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=7e7f1b6f-c2cb-4591-a36a-4c29baf49fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:42:dd:82:c6:65:16:47:44:53:64:c7:18: d0:90:7f:8c:40:53:67:29:20:99:60:1f:3c:81:31: 23:d5:a7:f4:8d:33:1d:02:8c:ce:92:da:17:9f:bc: e4:0c:91:ac:5e:f5:51:23:33:15:7e:4e:8d:13:4f: 1c:a0:df:06:45:e6:92:bb:de:71:be:55:fe:7a:ff: c1:ba:d3:f4:4d:06:39:90:9d:6b:9f:c5:d7:9b:31: ac:8c:60:3a:87:0c:87:84:c2:46:bf:53:bd:5d:48: 10:56:9b:18:89:d1:9b:44:8b:91:37:32:d1:a3:7b: b2:45:79:16:ea:b4:5f:f3:90:61:be:9e:42:f0:12: 69:42:32:9c:bc:d6:ea:5a:a6:d9:47:d3:ce:3e:c7: 3a:9b:47:58:c2:2b:ff:85:3c:f6:6f:2e:7b:ce:3f: 5d:2b:1d:5b:5b:60:72:b2:66:33:5a:79:87:a5:26: fa:1c:39:61:ef:07:97:91:ad:fe:0d:23:c4:1a:6f: a1:92:00:be:4e:a0:f4:43:f8:0f:cf:fb:dc:13:8d: fb:b0:9d:63:55:e3:18:4e:31:ab:8f:e6:24:4c:53: 65:f8:a8:95:8a:c0:5f:b7:89:2b:c2:ab:74:dc:77: 4d:ee:ce:6e:ff:d2:f8:25:02:69:9f:27:fa:69:0e: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:BC:14:E6:ED:1D:B5:1D:77:31:9D:91:ED:5E:16:03:56:DB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ea:d9:34:de:11:f8:76:a5:3a:38:f0:c1:a7:a2:44:46:05: d1:04:26:b0:b5:39:d8:90:68:b8:b0:31:4c:ab:2d:f8:ff:c8: 50:ee:24:e7:b1:ce:78:e8:f2:fb:29:73:1c:50:80:48:28:dd: 91:88:03:07:cf:a6:4b:b0:19:8f:dc:4a:b5:b0:d2:6a:c9:50: cd:3f:ba:6d:ab:78:23:76:45:2c:6b:d2:83:45:4b:da:7c:2b: 7a:5c:cd:22:b7:4c:2a:d1:8a:0a:19:28:62:9c:3b:56:22:a0: 14:78:c7:0b:3f:16:b7:e1:1b:01:44:d3:47:28:e3:a5:5c:a6: a3:04:68:89:9d:0a:47:de:62:70:df:9f:dc:1f:1b:e4:0c:90: c5:76:87:1c:03:92:0b:8b:b6:e5:d7:53:1f:e1:c6:66:02:92: 91:b2:8e:cf:cf:bd:30:a3:5e:12:c6:ab:f9:7e:7a:cb:5f:26: fe:01:b1:39:b3:f1:9e:84:55:ce:1e:86:fa:a2:1f:a3:d2:55: 3e:42:3c:39:70:2f:1f:ff:46:53:fb:2f:21:3b:a5:e5:04:c9: 26:45:d6:70:54:ae:80:13:d2:c8:7a:16:76:23:eb:16:19:a8: 16:9f:af:15:d7:b7:0a:35:a6:18:9a:b1:2a:04:77:c6:0f:05: c6:0f:9f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYokA0dnwAI0hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk N2U3ZjFiNmYtYzJjYi00NTkxLWEzNmEtNGMyOWJhZjQ5ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUpC3YLGZRZHRFNkxxjQkH+MQFNnKSCZYB88 gTEj1af0jTMdAozOktoXn7zkDJGsXvVRIzMVfk6NE08coN8GReaSu95xvlX+ev/B utP0TQY5kJ1rn8XXmzGsjGA6hwyHhMJGv1O9XUgQVpsYidGbRIuRNzLRo3uyRXkW 6rRf85Bhvp5C8BJpQjKcvNbqWqbZR9POPsc6m0dYwiv/hTz2by57zj9dKx1bW2By smYzWnmHpSb6HDlh7weXka3+DSPEGm+hkgC+TqD0Q/gPz/vcE437sJ1jVeMYTjGr j+YkTFNl+KiVisBft4krwqt03HdN7s5u/9L4JQJpnyf6aQ7fbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/rvBTm7R21HXcxnZHtXhYDVttWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2NhZjRlMDItOWUzMC0z ZjI5LWJmMDQtNGVlMGE1ZTllMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/q2TTeEfh2pTo48MGnokRGBdEEJrC1OdiQaLiwMUyrLfj/yFDuJOex znjo8vspcxxQgEgo3ZGIAwfPpkuwGY/cSrWw0mrJUM0/um2reCN2RSxr0oNFS9p8 K3pczSK3TCrRigoZKGKcO1YioBR4xws/FrfhGwFE00co46VcpqMEaImdCkfeYnDf n9wfG+QMkMV2hxwDkguLtuXXUx/hxmYCkpGyjs/PvTCjXhLGq/l+estfJv4BsTmz 8Z6EVc4ehvqiH6PSVT5CPDlwLx//RlP7LyE7peUEySZF1nBUroAT0sh6FnYj6xYZ qBafrxXXtwo1phiasSoEd8YPBcYPnzk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:35 2025 by rpki-client